Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S7Yxwa4vZmhor9TIpO8uiqqCBQo.roa
File: S7Yxwa4vZmhor9TIpO8uiqqCBQo.roa (raw, json)
Hash identifier: e9PQG9COPp5Mh8Vn39AJExryUnQfQmtfeqZYaUDXuLs=
Subject key identifier: 4B:B6:31:C1:AE:2F:66:68:68:AF:D4:C8:A4:EF:2E:8A:AA:82:05:0A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B9B097A0A7AB2C84264890C310C6F0B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S7Yxwa4vZmhor9TIpO8uiqqCBQo.roa
Signing time: Thu 09 Jan 2025 15:07:19 +0000
ROA not before: Thu 09 Jan 2025 15:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.81.152.0/22 maxlen: 24
45.90.238.0/24 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.140.0/22 maxlen: 22
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 11:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:9b:09:7a:0a:7a:b2:c8:42:64:89:0c:31:0c:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 15:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bb631c1ae2f666868afd4c8a4ef2e8aaa82050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:c5:23:02:3d:ec:63:d6:c1:d0:af:01:b7:
1f:23:d8:cb:8d:97:4c:3f:8c:84:b6:e3:24:fc:2a:
9c:79:57:c6:c1:a5:36:b8:ce:fc:ae:de:90:b5:7e:
c3:bd:69:7e:74:e1:e7:85:51:92:06:57:b9:46:30:
6d:06:04:5a:01:e6:f8:79:da:80:6e:e2:4f:3b:e4:
b7:0b:3e:22:9a:a9:7e:39:62:fa:10:f9:52:5e:1c:
e8:c9:93:0d:9c:56:92:52:56:73:8d:5e:a4:c6:98:
89:e8:e7:d9:94:02:1e:0f:41:88:2f:3b:14:2c:4a:
88:86:2a:f9:51:bd:15:87:db:c2:48:33:ee:40:7c:
15:8e:6c:d6:34:b5:aa:5a:c7:c1:f0:9c:97:3d:89:
a7:a3:b1:b5:b8:b6:1b:8c:4f:20:01:d0:6e:21:af:
57:43:cf:8e:07:cb:6f:30:ef:50:c2:14:78:ca:16:
95:87:60:20:73:96:c1:aa:fe:6e:3a:39:37:e4:19:
62:dc:ed:00:04:4d:b2:b9:a7:aa:84:0c:ac:ab:01:
b7:5c:c8:d5:69:94:1b:60:18:90:3a:ce:15:ff:17:
d4:40:5f:32:8c:81:73:31:0a:ca:15:db:89:a5:0d:
af:9c:cd:07:d6:42:de:4b:37:5d:14:c8:5c:ba:b0:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:31:C1:AE:2F:66:68:68:AF:D4:C8:A4:EF:2E:8A:AA:82:05:0A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S7Yxwa4vZmhor9TIpO8uiqqCBQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.81.152.0/22
45.90.238.0/24
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.140.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
21:82:83:d5:bd:28:7c:30:9c:20:6a:92:ed:22:ff:54:90:00:
18:13:27:de:4f:cf:ab:7c:04:32:62:5f:d0:37:85:4a:4f:2d:
6d:60:85:ca:70:77:ee:73:b1:06:12:60:49:79:d9:a8:51:ba:
db:38:05:e6:15:ee:e7:90:07:b5:e5:e7:e2:19:f6:b7:fb:ff:
26:cc:41:6c:e0:21:e7:73:5f:ee:a7:27:04:30:d6:7b:c2:d7:
8c:16:42:f1:20:4a:fb:ed:5f:39:d2:d7:39:b4:8c:a8:89:67:
87:52:6b:37:6f:29:62:bc:c3:ce:7c:35:43:40:57:62:e4:62:
fc:60:b5:cd:b0:8c:87:e5:f2:54:d8:ab:6d:bc:98:7e:5b:e6:
8e:46:37:57:19:55:8d:f8:d2:15:f7:1d:c1:fe:d8:9c:7e:de:
45:11:4b:65:e3:85:23:e3:80:88:b3:d7:4d:6a:6f:0d:cf:4c:
d7:79:12:18:f4:c0:00:d8:d3:78:52:30:9a:49:6c:fa:17:30:
95:76:e3:95:6c:c1:b8:ce:07:97:af:95:1a:b1:83:88:b9:9e:
32:b9:ab:1d:19:90:99:dc:69:0e:56:a9:a8:22:5e:66:ca:ef:
cf:82:36:c8:02:f3:76:09:82:77:72:bd:da:bf:7d:21:85:26:
36:64:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:30 2025 by rpki-client